Technical information
Malicious functions:
Sends SMS messages:
- +32355: ON WPT
Network activity:
Connecting to:
- id####.net
- contro####.####.com
- fil####.####.com
HTTP GET requests:
- id####.net/games/zippy-boxes/big_icon.jpg
- id####.net/images/icons/xemdi_logo01.png
- id####.net/games/taj-mahal-solitaire/img/icon/icon-120x120.png
- id####.net/
- id####.net/games/china-mahjong/img/icon/icon-120x120.png
- id####.net/games/burger-shop/img/icon/icon-120x120.png
- id####.net/images/icons/xemdi_01.png
- fil####.####.com/games/TubeMate.apk
- id####.net/images/icons/mn_03.png
- id####.net/games/magic-card-saga/big_icon.jpg
- id####.net/js/jquery.min.js
- id####.net/games/sushi-slicer/icon.png
- id####.net/images/icons/mn_08.png
- contro####.####.com/demo.php
- id####.net/games/neptune-solitaire/img/icon/icon-120x120.png
- id####.net/images/icons/mn_01.png
- id####.net/games/solitaire/icon.png
- id####.net/js/application.js
- id####.net/css/cake.generic.css
- id####.net/games/butterfly-match-3/img/icon/icon-120x120.png
- id####.net/games/2-ways/big_icon.jpg
- id####.net/js/menu.js
- id####.net/games/dragon-run/img/icon/icon-120x120.png
- id####.net/games/swingventure/big_icon.jpg
- id####.net/games/space-connect/img/icon/icon-120x120.png
- id####.net/images/icons/mn_05.png
- id####.net/images/icons/mn_04.png
- id####.net/games/fly-or-die/big_icon.jpg
- id####.net/games/bob-the-robber-to-go/images/icon.png
- contro####.####.com/shotcut_setting.php?&isDelay=####&packageName=####&k...
- id####.net/games/dots-and-boxes/img/icon/icon-120x120.png
- id####.net/games/shoot-them-all/shoot-them-all.jpg
- id####.net/games/deep-sea-jewels/img/icon/icon-120x120.png
- id####.net/images/icons/lock.png
- id####.net/games/catshunger/big_icon.jpg
- id####.net/js/bootstrap.min.js
- id####.net/images/icons/mn_02.png
- id####.net/css/bootstrap.min.css
- id####.net/games/hook/icon.gif
- id####.net/css/styles.css
- id####.net/games/bubble-meadow/big_icon.jpg
- id####.net/games/best-pet-friends/big_icon.jpg
- id####.net/games/cup-of-tea-solitaire/img/icon/icon-120x120.png
- id####.net/games/crazy-birds-2/big_icon.jpg
- id####.net/js/jquery.lazyload.js
- contro####.####.com/apksubs.php?&shortcode=####&keyword=####
- id####.net/images/icons/icon_gototop.png
- id####.net/games/2048-grow-up/img/icon/icon-120x120.png
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /sdcard/####.tmp
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /sdcard/Android/data/####/cache/-524018820.tmp
- /data/data/####/databases/google_analytics_v4.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/files/gaClientId
- /sdcard/Android/data/####/cache/.nomedia
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
